This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer File: xr--8nm_ne1uNlHgYo05unkpT3g.cer (raw, json) Hash identifier: EZnT7C3k434DFKiAyXxwwhw4K+jHHuhrwCmJ6+sMQx4= Subject key identifier: C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E41E937FBDD1FA2E94E51BCA66209 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201188 IP: 64.111.88.0/22 IP: 185.16.110.0/24 IP: 185.63.16.0/22 IP: 185.63.92.0/22 IP: 192.100.66.0/24 IP: 2a03:ba0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:41:e9:37:fb:dd:1f:a2:e9:4e:51:bc:a6:62:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:07:86:d6:1f:72:18:5c:b4:60:cc:e2:b9:d5: 70:e4:c4:d6:f8:1f:e5:e3:fd:ea:90:a8:5d:ac:55: c9:9c:76:e6:43:0e:bf:d7:95:83:8f:c5:b5:2d:e9: aa:d0:2c:38:cf:61:72:c5:53:45:33:0f:aa:7d:1e: 52:e3:11:c4:30:b7:b8:a5:9a:aa:bb:61:4c:b6:75: a0:45:91:2e:cc:56:45:7f:10:11:93:57:94:d7:ff: a1:0b:04:6d:b1:b8:43:d9:a9:f2:de:ac:79:db:9b: 4c:c6:f2:07:ca:d6:9b:6f:d8:e7:f4:e4:75:5a:43: f6:ff:90:5e:a3:c4:39:91:06:23:fc:88:50:38:67: f1:2c:01:37:c6:15:7d:48:a4:93:a9:85:e8:94:73: c4:d3:c9:80:d5:9f:57:3b:10:7a:58:f3:2e:b2:9a: d1:f4:31:36:89:c5:26:a3:dd:39:71:8c:a4:30:d2: d0:17:2d:07:87:51:9f:16:27:ce:8c:c2:e1:5a:7f: 94:5e:b7:64:e9:51:85:e9:68:ee:a0:e0:89:76:fd: 1f:02:d6:b3:32:2d:5e:ab:5c:41:19:ae:d2:0d:f8: 27:83:f7:75:d1:1e:45:2b:b5:3e:6d:a5:1b:2f:b9: 6e:49:2b:c0:a8:12:f9:b6:40:1f:7d:ab:c8:df:86: 04:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.111.88.0/22 185.16.110.0/24 185.63.16.0/22 185.63.92.0/22 192.100.66.0/24 IPv6: 2a03:ba0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201188 Signature Algorithm: sha256WithRSAEncryption 5b:51:82:44:17:9f:02:82:83:89:26:c3:e6:f6:f9:cb:c2:f6: 42:78:85:bb:60:ec:33:e8:b6:70:26:39:fe:1d:c0:6a:f2:5f: e2:8a:07:7a:94:75:42:51:7b:53:44:1f:64:ce:c6:68:4f:66: 4f:9a:75:8e:1a:61:a5:95:8c:0c:7a:1a:5f:ad:0e:85:da:54: 0b:8a:3b:e0:af:81:ce:bd:44:01:6c:60:9c:85:c3:d1:d3:a1: 78:f0:b4:00:12:72:10:e2:e8:5a:15:cb:1b:48:68:71:3c:21: c4:57:7b:6b:07:ec:68:f8:62:2e:ac:c0:0b:e8:3c:6d:4c:77: 85:ad:e9:5e:e9:f8:f6:a6:d3:7a:c7:79:63:00:98:5d:d2:17: f9:fe:23:59:06:e2:9a:a6:d7:8a:90:c5:5a:92:1b:53:94:04: e6:af:ad:3f:f0:f5:6b:de:3f:20:57:f3:cd:94:33:b7:48:4f: e6:d8:a9:2a:98:83:ac:0d:39:36:5a:cc:18:5b:84:a1:40:fd: 55:6e:4d:10:ed:0f:df:d9:61:e1:34:69:47:73:42:73:5f:ce: 09:16:ed:90:87:c9:69:0a:9d:ab:19:1f:68:ab:82:77:88:37: db:3e:05:79:eb:1a:f8:14:9c:71:d4:01:9c:0d:9e:c1:6e:a2: 82:d8:33:6a -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt5fkHpN/vdH6LpTlG8pmIJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmJmYmVmMjc5YmY5ZGVkNmUzNjUxZTA2MjhkMzliYTc5Mjk0Zjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5geG1h9yGFy0YMziudVw5MTW+B/l 4/3qkKhdrFXJnHbmQw6/15WDj8W1Lemq0Cw4z2FyxVNFMw+qfR5S4xHEMLe4pZqq u2FMtnWgRZEuzFZFfxARk1eU1/+hCwRtsbhD2any3qx525tMxvIHytabb9jn9OR1 WkP2/5Beo8Q5kQYj/IhQOGfxLAE3xhV9SKSTqYXolHPE08mA1Z9XOxB6WPMusprR 9DE2icUmo905cYykMNLQFy0Hh1GfFifOjMLhWn+UXrdk6VGF6WjuoOCJdv0fAtaz Mi1eq1xBGa7SDfgng/d10R5FK7U+baUbL7luSSvAqBL5tkAffavI34YE9QIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFMa/vvJ5v53tbjZR4GKNObp5KU94MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIwLzI4NDYy Yy0yYzIzLTRmOTUtOGU4ZC1hZGU1MzBkN2M0MWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvMjg0NjJj LTJjMjMtNGY5NS04ZThkLWFkZTUzMGQ3YzQxYi8xL3hyLS04bm1fbmUxdU5sSGdZ bzA1dW5rcFQzZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQCQG9YAwQAuRBuAwQCuT8QAwQCuT9cAwQAwGRC MA0EAgACMAcDBQMqAwugMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMR5DANBgkq hkiG9w0BAQsFAAOCAQEAW1GCRBefAoKDiSbD5vb5y8L2QniFu2DsM+i2cCY5/h3A avJf4ooHepR1QlF7U0QfZM7GaE9mT5p1jhphpZWMDHoaX60OhdpUC4o74K+Bzr1E AWxgnIXD0dOhePC0ABJyEOLoWhXLG0hocTwhxFd7awfsaPhiLqzAC+g8bUx3ha3p Xun49qbTesd5YwCYXdIX+f4jWQbimqbXipDFWpIbU5QE5q+tP/D1a94/IFfzzZQz t0hP5tipKpiDrA05NlrMGFuEoUD9VW5NEO0P39lh4TRpR3NCc1/OCRbtkIfJaQqd qxkfaKuCd4g32z4Feesa+BSccdQBnA2ewW6igtgzag== -----END CERTIFICATE-----Generated at Fri Jan 2 08:16:20 2026 by rpki-client